$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE7DE/CEE3D71804E111E98EA7D872C4F9AE02/NxJzz9jCyQi2kda-oXXo3oK9Q5o.mft File: NxJzz9jCyQi2kda-oXXo3oK9Q5o.mft (raw, json) Hash identifier: LKZUqx802wETQDztwFZ39ov5ylnr5OiOfQNBV7PI8QE= Subject key identifier: 31:73:C6:93:A1:95:95:BB:87:ED:5A:9F:C0:04:14:B8:11:23:74:03 Authority key identifier: 37:12:73:CF:D8:C2:C9:08:B6:91:D6:BE:A1:75:E8:DE:82:BD:43:9A Certificate issuer: /CN=A91DE7DE/serialNumber=371273CFD8C2C908B691D6BEA175E8DE82BD439A Certificate serial: 1273 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NxJzz9jCyQi2kda-oXXo3oK9Q5o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE7DE/CEE3D71804E111E98EA7D872C4F9AE02/NxJzz9jCyQi2kda-oXXo3oK9Q5o.mft Manifest number: 1241 Signing time: Tue 12 May 2026 17:09:49 +0000 Manifest this update: Tue 12 May 2026 17:09:48 +0000 Manifest next update: Tue 19 May 2026 17:09:48 +0000 Files and hashes: 1: NxJzz9jCyQi2kda-oXXo3oK9Q5o.crl (hash: eztJUSlZ+VUpctYfQwCPlCo0OXw6dQWAAlPZDyXLRQI=) 2: 7F7F1470091D11F0B7E95627C4F9AE02.roa (hash: f+/uDtECPh4z9lUgGecamZwBqy/HTP1IaGpVkdXlDqM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE7DE/CEE3D71804E111E98EA7D872C4F9AE02/NxJzz9jCyQi2kda-oXXo3oK9Q5o.crl rsync://rpki.apnic.net/member_repository/A91DE7DE/CEE3D71804E111E98EA7D872C4F9AE02/NxJzz9jCyQi2kda-oXXo3oK9Q5o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NxJzz9jCyQi2kda-oXXo3oK9Q5o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 17:09:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4723 (0x1273) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE7DE, serialNumber=371273CFD8C2C908B691D6BEA175E8DE82BD439A Validity Not Before: May 12 17:09:48 2026 GMT Not After : May 19 17:09:48 2026 GMT Subject: CN=6a035edd-7cc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:ca:34:08:e1:31:ae:fe:af:59:a4:aa:84:11: 07:40:a1:c1:e0:2b:c6:8d:f5:81:27:e0:ee:43:99: 90:ff:df:b8:5c:ca:e1:2d:72:ce:79:1a:b2:cc:7d: 69:0b:bb:09:5d:69:d6:06:7e:57:c4:09:6c:a0:a2: 60:9b:d3:99:35:c3:8f:62:db:b6:e0:34:2d:79:0a: c2:37:1e:41:58:be:ef:7e:c2:20:31:70:77:1f:f1: 37:e3:48:14:55:25:ee:69:c1:67:41:70:06:6a:c7: 18:9f:13:d3:53:a7:0e:46:20:d6:fe:08:d1:cc:2d: fc:5a:d4:03:bc:1f:db:9e:96:fa:fb:54:ff:ae:c5: 47:c0:c5:87:76:b1:f0:fb:04:08:58:33:f0:6d:02: 78:97:38:28:69:8d:7a:db:64:4b:f2:0f:28:35:8d: f3:d6:ed:69:6e:a5:d8:d0:44:1e:9d:95:ed:ab:68: af:0a:a8:96:55:bb:95:f9:92:ca:b5:d1:9d:df:e7: 14:21:bd:dc:9b:fd:63:db:d6:c1:86:7c:6c:81:8f: 77:fc:00:03:96:f4:d9:94:2e:97:ed:21:b5:bc:86: 54:60:ee:54:41:6f:f6:5d:2f:9a:97:74:0b:48:a7: a7:ba:b3:5c:00:02:1b:44:cf:66:c5:6a:dd:68:c7: b9:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:73:C6:93:A1:95:95:BB:87:ED:5A:9F:C0:04:14:B8:11:23:74:03 X509v3 Authority Key Identifier: keyid:37:12:73:CF:D8:C2:C9:08:B6:91:D6:BE:A1:75:E8:DE:82:BD:43:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE7DE/CEE3D71804E111E98EA7D872C4F9AE02/NxJzz9jCyQi2kda-oXXo3oK9Q5o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NxJzz9jCyQi2kda-oXXo3oK9Q5o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE7DE/CEE3D71804E111E98EA7D872C4F9AE02/NxJzz9jCyQi2kda-oXXo3oK9Q5o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:42:1e:dd:e6:95:5d:f1:dc:15:b7:58:58:f9:5c:b9:92:8b: 4f:7e:7e:a1:d3:a2:d1:c3:cd:95:a7:73:8a:a5:be:ea:f1:c0: 71:e1:c7:93:58:7c:1a:f4:3e:0f:64:25:66:27:63:c7:9a:d4: f7:06:e6:a6:44:5e:d6:7e:c0:28:7d:b4:7e:23:95:86:22:d4: d1:6c:b4:19:b7:fd:f4:9b:bd:f7:83:92:de:dc:03:6b:5e:ff: 15:ed:af:d3:73:46:f5:30:a4:4a:0a:9e:dd:c7:0e:ea:0c:8b: 8c:e7:68:18:12:6c:f1:32:ac:c7:26:c4:29:88:86:c7:9b:ca: 67:2d:95:84:f8:88:13:3c:dd:ee:e9:0f:b6:a4:cc:b6:5d:36: f6:f5:f3:c8:b0:65:f8:52:0a:41:3a:2f:aa:01:f4:ef:a2:17: 1c:cc:9e:cb:4b:82:b9:d7:86:af:92:79:ab:46:e2:8c:89:36: d0:eb:cc:16:c9:ab:61:aa:7b:55:75:72:62:02:2a:77:62:af: 20:6c:cb:84:82:cf:c2:64:c4:c3:56:c9:08:12:46:0d:93:80: 5e:d5:36:24:c4:3a:b7:b5:5c:19:83:d6:23:31:cb:74:c0:6f: bd:a9:61:83:b6:ee:b5:20:e5:a1:0f:17:1c:6e:58:51:86:26: 9d:26:12:15 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEnMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REU3REUxMTAvBgNVBAUTKDM3MTI3M0NGRDhDMkM5MDhCNjkxRDZCRUExNzVFOERF ODJCRDQzOUEwHhcNMjYwNTEyMTcwOTQ4WhcNMjYwNTE5MTcwOTQ4WjAYMRYwFAYD VQQDEw02YTAzNWVkZC03Y2M3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmco0COExrv6vWaSqhBEHQKHB4CvGjfWBJ+DuQ5mQ/9+4XMrhLXLOeRqyzH1p C7sJXWnWBn5XxAlsoKJgm9OZNcOPYtu24DQteQrCNx5BWL7vfsIgMXB3H/E340gU VSXuacFnQXAGascYnxPTU6cORiDW/gjRzC38WtQDvB/bnpb6+1T/rsVHwMWHdrHw +wQIWDPwbQJ4lzgoaY1622RL8g8oNY3z1u1pbqXY0EQenZXtq2ivCqiWVbuV+ZLK tdGd3+cUIb3cm/1j29bBhnxsgY93/AADlvTZlC6X7SG1vIZUYO5UQW/2XS+al3QL SKenurNcAAIbRM9mxWrdaMe5zwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDFzxpOh lZW7h+1an8AEFLgRI3QDMB8GA1UdIwQYMBaAFDcSc8/YwskItpHWvqF16N6CvUOa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTdERS9DRUUzRDcxODA0 RTExMUU5OEVBN0Q4NzJDNEY5QUUwMi9OeEp6ejlqQ3lRaTJrZGEtb1hYbzNvSzlR NW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL054Snp6OWpDeVFpMmtkYS1vWFhvM29LOVE1by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RTdERS9DRUUzRDcxODA0RTExMUU5OEVBN0Q4NzJDNEY5QUUwMi9OeEp6ejlqQ3lR aTJrZGEtb1hYbzNvSzlRNW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbEIe3eaVXfHcFbdYWPlcuZKLT35+odOi0cPNladziqW+6vHAceHHk1h8GvQ+ D2QlZidjx5rU9wbmpkRe1n7AKH20fiOVhiLU0Wy0Gbf99Ju994OS3twDa17/Fe2v 03NG9TCkSgqe3ccO6gyLjOdoGBJs8TKsxybEKYiGx5vKZy2VhPiIEzzd7ukPtqTM tl029vXzyLBl+FIKQTovqgH076IXHMyey0uCudeGr5J5q0bijIk20OvMFsmrYap7 VXVyYgIqd2KvIGzLhILPwmTEw1bJCBJGDZOAXtU2JMQ6t7VcGYPWIzHLdMBvvalh g7butSDloQ8XHG5YUYYmnSYSFQ== -----END CERTIFICATE-----Generated at Wed May 13 15:19:29 2026 by rpki-client